diff --git a/cinder/keymgr/conf_key_mgr.py b/cinder/keymgr/conf_key_mgr.py
index 5bac9a26bad..b0c2898dae2 100644
--- a/cinder/keymgr/conf_key_mgr.py
+++ b/cinder/keymgr/conf_key_mgr.py
@@ -44,6 +44,7 @@ from cinder.i18n import _
 
 key_mgr_opts = [
     cfg.StrOpt('fixed_key',
+               secret=True,
                help='Fixed key returned by key manager, specified in hex',
                deprecated_group='keymgr'),
 ]